I might be late to the party, but I think this is still broken in 9.5 SP2. I did manage to get it working by creating a Patch provisioning entry and selecting Scan only with the Scan and Repair settings set to my OSD Patch to Baseline config. In my OSD Patch to Baseline config, I set it to scan the custom group: OSD Baseline - and I ticked the box right underneath that says "Immediately install all applicable items."
It seems to be working fine now.